Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier: ZWCgVH2Tmjm2KxEg4apimxTwNN8/7KabWOtgEEAaCWg=
Subject key identifier: 0D:B2:59:79:5B:CD:68:61:16:B7:FA:23:49:E6:94:6B:48:5D:00:34
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial: 345B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number: 3453
Signing time: Fri 31 Jan 2025 14:50:06 +0000
Manifest this update: Fri 31 Jan 2025 14:50:06 +0000
Manifest next update: Fri 07 Feb 2025 14:50:06 +0000
Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: VXCsjXL45N9boSb3AW56mE0ntJkSeo+5W1ZcS36k+Gk=)
2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: t/NnMy3xpmssx9DBTqRefxAqemELZw1L5Qwj8l5jaiw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13403 (0x345b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Validity
Not Before: Jan 31 14:50:06 2025 GMT
Not After : Feb 7 14:50:06 2025 GMT
Subject: CN=679ce31e-d13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:db:24:b5:eb:79:98:63:fa:7e:f6:90:29:
00:04:5b:f5:85:76:e3:4f:02:37:9f:40:49:4a:19:
d6:80:29:2b:83:2f:85:43:cc:2c:bb:37:b9:2f:42:
65:52:29:68:28:6c:69:41:7f:8d:25:9d:1c:3d:cd:
49:bd:7a:51:19:fb:e5:56:85:e8:56:0c:bb:b8:48:
55:28:06:51:01:11:7f:e3:07:9d:e2:ab:05:0d:c7:
fc:38:f9:92:a7:f1:2e:c6:55:ad:78:70:ad:60:12:
fb:9e:f2:e2:5e:0c:49:45:9d:00:98:4f:4e:db:86:
d5:e1:88:76:b3:26:7c:0d:81:d3:99:b5:57:bf:07:
15:b0:79:7a:7a:d2:ba:30:57:aa:9e:e4:1f:28:80:
85:ca:a7:64:e2:17:5e:f7:bb:76:6d:14:5e:8c:74:
df:4c:15:4b:52:f6:90:8a:34:a4:14:a6:f7:c4:1e:
29:a9:09:14:df:4a:a4:98:c0:74:1c:3c:f9:d6:a8:
6e:3c:c2:60:77:74:ba:04:b6:53:90:39:95:44:ea:
26:b2:8a:50:cc:95:1a:3a:95:00:d2:04:69:14:5b:
7b:80:e0:25:1f:66:98:d9:5e:0b:c9:91:7c:77:9f:
7b:c9:3c:1d:31:e0:e4:5e:c9:d1:38:ff:f6:11:45:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B2:59:79:5B:CD:68:61:16:B7:FA:23:49:E6:94:6B:48:5D:00:34
X509v3 Authority Key Identifier:
keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:40:c8:c2:bb:ed:f4:fa:4c:95:05:7a:8e:35:3d:07:12:22:
18:02:b5:f9:b6:84:e9:b3:b4:46:c3:2e:e2:a1:81:de:31:f9:
08:62:af:17:b5:91:c8:77:3a:d7:6c:44:4a:80:41:75:a8:02:
07:fc:27:70:d7:20:8a:1b:37:e0:ac:e7:f1:6b:19:fe:81:e3:
42:e3:96:7f:eb:39:a6:e0:ad:1e:09:6a:e8:72:62:34:b0:50:
8c:d1:e7:88:8b:90:4e:dd:13:b1:54:f1:5d:a1:db:50:82:8d:
05:86:a5:c4:e8:0a:a0:dc:13:4c:86:4a:29:d8:a0:89:9d:bd:
18:d8:e7:da:97:9a:91:0f:c1:84:ed:f5:12:bc:66:9a:77:4d:
d1:7f:6e:5f:ae:04:89:c6:f4:56:a2:48:41:a1:b4:f4:79:db:
f0:e2:03:99:91:27:f5:f5:73:cb:ad:53:87:e1:0e:e8:45:32:
4e:9c:59:35:38:8b:93:92:61:75:33:59:da:2f:2b:ff:02:33:
a5:b7:f1:3c:14:0d:2a:36:b5:af:33:ed:03:8d:94:a3:35:71:
1c:01:57:3e:84:3c:84:20:04:69:33:37:91:5c:3e:8e:4d:bd:
7b:cb:cc:14:81:e5:bd:ef:8a:42:fa:cf:50:95:cf:0a:bd:e1:
1c:96:d4:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG
QUIyQzc2MTIwHhcNMjUwMTMxMTQ1MDA2WhcNMjUwMjA3MTQ1MDA2WjAYMRYwFAYD
VQQDEw02NzljZTMxZS1kMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAunvbJLXreZhj+n72kCkABFv1hXbjTwI3n0BJShnWgCkrgy+FQ8wsuze5L0Jl
UiloKGxpQX+NJZ0cPc1JvXpRGfvlVoXoVgy7uEhVKAZRARF/4wed4qsFDcf8OPmS
p/EuxlWteHCtYBL7nvLiXgxJRZ0AmE9O24bV4Yh2syZ8DYHTmbVXvwcVsHl6etK6
MFeqnuQfKICFyqdk4hde97t2bRRejHTfTBVLUvaQijSkFKb3xB4pqQkU30qkmMB0
HDz51qhuPMJgd3S6BLZTkDmVROomsopQzJUaOpUA0gRpFFt7gOAlH2aY2V4LyZF8
d597yTwdMeDkXsnROP/2EUX8+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2yWXlb
zWhhFrf6I0nmlGtIXQA0MB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE
OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN
alRfaUFJSnFpa242c3NkaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCQMjCu+30+kyVBXqONT0HEiIYArX5toTps7RGwy7ioYHeMfkIYq8X
tZHIdzrXbERKgEF1qAIH/Cdw1yCKGzfgrOfxaxn+geNC45Z/6zmm4K0eCWrocmI0
sFCM0eeIi5BO3ROxVPFdodtQgo0FhqXE6Aqg3BNMhkop2KCJnb0Y2Ofal5qRD8GE
7fUSvGaad03Rf25frgSJxvRWokhBobT0edvw4gOZkSf19XPLrVOH4Q7oRTJOnFk1
OIuTkmF1M1naLyv/AjOlt/E8FA0qNrWvM+0DjZSjNXEcAVc+hDyEIARpMzeRXD6O
Tb17y8wUgeW974pC+s9Qlc8KveEcltSM
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:09 2025 by rpki-client